Secure Communication in 
Stochastic Wireless Networks 



Pedro C. Pinto, Student Member, IEEE, Joao Barros, Member, IEEE, 
and Moe Z. Win, Fellow, IEEE 



Corresponding Address: 
Pedro C. Pinto 
Laboratory for Information and Decision Systems (LIDS) 
Massachusetts Institute of Technology (MIT) 
77 Massachusetts Avenue, Room 32-D674 
Cambridge, MA 02139 USA 

Tel.: (857) 928-6444 
e-mail: ppinto@mit.edu 



The present document is a draft submitted for publication on November 24, 2009. 

P. C. Pinto and M. Z. Win are with the Laboratory for Information and Decision Systems (LIDS), Massachusetts Institute 
of Technology, Room 32-D674, 77 Massachusetts Avenue, Cambridge, MA 02139, USA (e-mail: ppinto@mit.edu, 
moewinSmit . edu). J. Barros is with Departamento de Engenharia Electrotecnica e de Computadores, Faculdade de Engenharia 
da Universidade do Porto, Portugal (e-mail: jbarros@fe.up.pt). 

This research was supported, in part, by the Portuguese Science and Technology Foundation under grant SFRH-BD- 17388- 
2004; the MIT Institute for Soldier Nanotechnologies; the Office of Naval Research under Presidential Early Career Award for 
Scientists and Engineers (PECASE) N00014-09-1-0435; and the National Science Foundation under grant ECS-0636519. 



1 



Contents 

I Introduction O 

II System Model 5 

H-A Wireless Propagation Characteristics 5 

II-B Wireless Information-Theoretic Security 7 

II-C zS-Graph b 

II- D Poisson iS-Gmph [lO 

III Local Connectivity in the Poisson i<S-Graph 

III- A In-Degree Characterization 

III-B Out-Degree Characterization 

III-C General Relationships Between In- and Out-Degree 

III-D Effect of the Wireless Propagation Characteristics 

III-E Effect of the Secrecy Rate Threshold and Noise Powers 

III- F Numerical Results 

IV Techniques for Communication with Enhanced Secrecy 

IV- A Sectorized Transmission 

IV-B Eavesdropper Neutralization 

IV- C Numerical Results 

V Maximum Secrecy Rate in the Poisson iS- Graph 

V- A Distribution of the Maximum Secrecy Rate 

V-B Existence and Outage of the Maximum Secrecy Rate 

V- C Numerical Results 

VI The Case of Colluding Eavesdroppers 

VI- A Maximum Secrecy Rate of a Single Link 

VI-B Distribution of the Maximum Secrecy Rate of a Single Link 

VI-C Existence and Outage of the Maximum Secrecy Rate of a Single Link . . 
VI-D Colluding vs. Non-Colluding Eavesdroppers for a Single Link 



VI-E iiS-Graph with Colluding Eavesdroppers 
VI-F Numerical Results 

VII Conclusions 

Appendix A: Proof that Inequality d23l) is Strict 
Appendix B: Derivation of (145b 
Appendix C: Derivation of <f68b 
References 



3 



Abstract 

Information-theoretic security - widely accepted as the strictest notion of security - relies on channel 
coding techniques that exploit the inherent randomness of the propagation channels to significantly 
strengthen the security of digital communications systems. Motivated by recent developments in the field, 
this paper aims at a characterization of the fundamental secrecy limits of wireless networks. Based on a 
general model in which legitimate nodes and potential eavesdroppers are randomly scattered in space, the 
intrinsically secure communications graph (i6>-graph) is defined from the point of view of information- 
theoretic security. Conclusive results are provided for the local connectivity of the Poisson i<S-graph, 
in terms of node degrees and isolation probabilities. It is shown how the secure connectivity of the 
network varies with the wireless propagation effects, the secrecy rate threshold of each link, and the noise 
powers of legitimate nodes and eavesdroppers. Sectorized transmission and eavesdropper neutralization 
are explored as viable strategies for improving the secure connectivity. Lastly, the maximum secrecy rate 
between a node and each of its neighbours is characterized, and the case of colluding eavesdroppers is 
studied. The results help clarify how the spatial density of eavesdroppers can compromise the intrinsic 
security of wireless networks. 

Index Terms 

Physical-layer security, wireless networks, stochastic geometry, secure connectivity, node degree, 
secrecy capacity, colluding eavesdroppers. 

I. Introduction 

Contemporary security systems for wireless networks are based on cryptographic primitives 
that generally ignore two key factors: (a) the physical properties of the wireless medium, and 
(b) the spatial configuration of both the legitimate and malicious nodes. These two factors 
are important since they affect the communication channels between the nodes, which in turn 
determine the fundamental secrecy limits of a wireless network. In fact, the inherent randomness 
of the physics of the wireless medium and the spatial location of the nodes can be leveraged to 
provide intrinsic security of the communications infrastructure at the physical-layer level^ 

'in the literature, the term "security" typically encompasses 3 different characteristics: secrecy (or privacy), integrity, and 
authenticity. This paper does not consider the issues of integrity or authenticity, and the terms "secrecy and "security" are used 
interchangeably. 
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The basis for information-theoretic security, which builds on the notion of perfect secrecy (T), 
was laid in and later in J3]|. Moreover, almost at the same time, the basic principles of public- 
key cryptography, which lead to the predominance of computational security, were published in 
IHJ. More recently, there has been a renewed interest in information-theoretic security over wire- 
less channels. Space-time signal processing techniques for secure communication over wireless 
links are introduced in [5j. The secrecy of cooperative relay broadcast channels is considered 
in [0. The case of a fixed number of colluding eavesdroppers placed at the same location is 
analyzed in Q. The scenario of compound wiretap channels is considered in [8]. The capacity of 
cognitive interference channels with secrecy constraints is analyzed in flU. The achievable secret 
communication rates using multiple-input multiple-output communications are investigated in 
lfT0l - lfT4l . The secrecy capacity of various degraded fading channels is established in lfT5ll . A 
detailed characterization of the outage secrecy capacity of slow fading channels is provided in 
ifToll . The ergodic secrecy capacity of fading channels was derived independently in [TTvTl — fTl~9Tl . 
The notion of strong secrecy for wireless channels is introduced in EOl . Some secrecy properties 
of random geometric graphs were presented in EQ. 

We are interested in the fundamental secrecy limits of large-scale wireless networks. The 
spatial location of the nodes can be modeled either deterministically or stochastically. De- 
terministic models include square, triangular, and hexagonal lattices in the two-dimensional 
plane []22 | -[l24 | . which are applicable when the position of the nodes in the network is known 
exactly or is constrained to a regular structure. In contrast, in many important scenarios, only 
a statistical description of the node positions is available, and thus a stochastic spatial model is 
the natural choice. In particular, the Poisson point process G51 has been successfully used in the 
context of wireless networks, most notably in what concerns connectivity and coverage ll26l - 
11281 . throughput [|29l . OOll . interference 0111 - 113411 . environmental monitoring [35], and sensor 
cooperation lf3~6ll . among other topics. 

In this paper, we aim at a mathematical characterization of the secrecy properties of stochastic 
wireless networks. The main contributions are as follows: 

• Framework for intrinsic security in stochastic networks: We introduce an information- 
theoretic definition of the intrinsically secure communications graph (iiS-graph), based 
on the notion of strong secrecy. Our framework considers spatially scattered users and 
eavesdroppers, subject to generic wireless propagation characteristics. 
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• Local connectivity in the iS-graph: We provide a complete probabilistic characterization of 
both in-degree and out-degree of a typical node in the Poisson iiS-graph, using fundamental 
tools of stochastic geometry. 

• Techniques for communication with enhanced secrecy: We proposed sectorized transmission 
and eavesdropper neutralization as two techniques for enhancing the secrecy of communi- 
cation, and quantify their effectiveness in terms of the resulting average node degrees. 

• Maximum secrecy rate (MSR) in the iS -graph: We provide a complete probabilistic char- 
acterization of the MSR between a typical node of the Poisson ZiS-graph and each of its 
neighbors. In addition, we derive expressions for the probability of existence of a non-zero 
MSR, and the probability of secrecy outage. 

• The case of colluding eavesdroppers: We provide a characterization of the MSR and average 
node degrees for scenarios in which the eavesdroppers are allowed to collude, i.e, exchange 
and combine information. We quantify exactly how eavesdropper collusion degrades the 
secrecy properties of the legitimate nodes, in comparison to a non-colluding scenario. 

This paper is organized as follows. Section [II] describes the system model. Section [HI] char- 
acterizes local connectivity in the Poisson iiS-graph. Section [IV] analyzes two techniques for 
enhancing the secrecy of communication. Section |V] considers the MSR between a node and its 
neighbours. Section IVIl characterizes the case of colluding eavesdroppers. Section IVTI1 concludes 
the paper and summarizes important findings. 

II. System Model 

We start by describing our system model and defining our measures of secrecy. The notation 
and symbols used throughout the paper are summarized in Table HI 

A. Wireless Propagation Characteristics 

In a wireless environment, the received power P rx (xi,Xj) associated with the link x^Xj can 
be written as 

where P e is the (common) transmit power of the legitimate nodes; and g(xi, Xj, Z XuX ) is the 
power gain of the link Xix], where the random variable (RV) Z x . x . represents the random 
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propagation effects (such as multipath fading or shadowing) associated with link XjXj. We 
consider that the Z Xi:Xj ,Xi ^ Xj are independent identically distributed (IID) RVs with common 
probability density function (PDF) fz( z ), an d that Z Xi)X . = Z Xj>x . due to channel reciprocity. 
The channel gain g(xi,Xj, Z XiiXj ) is considered constant (quasi-static) throughout the use of the 
communications channel, which corresponds to channels with a large coherence time. The gain 
function is assumed to satisfy the following conditions: 

1) g(xi,xj, Z XiiX .) depends on Xi and Xj only through the link length \xi — Xj\; with abuse 
of notation, we can write g(r,z) = g(xi, Xj, z)\\ Xi - Xj \^. r . 

2) g(r, z) is continuous and strictly decreasing in r. 

3) linwoo g(r, z) = 0. 

The proposed model is general enough to account for common choices of g. One example is 
the unbounded model where g(r,z) = -f^. The term -jf accounts for the far- field path loss with 
distance, where the amplitude loss exponent b is environment-dependent and can approximately 
range from 0.8 (e.g., hallways inside buildings) to 4 (e.g., dense urban environments), with 6=1 
corresponding to free space propagation. This model is analytically convenient OT1 . but since 
the gain becomes unbounded as the distance approaches zero, it must be used with care for 
extremely dense networks. Another example is the bounded model where g(r, z) = . This 
model has the same far-field dependence as the unbounded model, but eliminates the singularity 
at the origin. Unfortunately, it often leads to intractable analytical results. The effect of the 
singularity at r = on the performance evaluation of a wireless system is considered in ll37l . 

Furthermore, by appropriately choosing of the distribution of Z XiiXj , both models can account 
for various random propagation effects OTI . including: 

1) Path loss only: Z XijXj = 1. 

2) Path loss and Nakagami-m fading: Z XiiXj = c? x . x . , where a x . x , ~ G(m, 

3) Path loss and log-normal shadowing: Z XijX , = exp(2a a G Xi:Xj ), where G XuX] ~ jV(0, 1)0 
The term exp(2cr s G a ; ija ; j ) has a log-normal distribution, where u s is the shadowing coeffi- 
cient. 

4) Path loss, Nakagami-m fading, and log-normal shadowing: Z XijXj = o? XuX . exp(2a s G XuXj ), 



2 We use Q(x,6) to denote a gamma distribution with mean xO and variance x6 2 . 
3 We use a 2 ) to denote a Gaussian distribution with mean /i and variance a 2 . 
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where at 



G{m,±), G XiiXj ~ jV(0, 1), with a. 



independent of G 



5. Wireless Information-Theoretic Security 

We now define our measure of secrecy more precisely. While our main interest is targeted 
towards the behavior of large-scale networks, we briefly review the setup for a single legitimate 
link with a single eavesdropper. The results thereof will serve as basis for the notion of iiS-graph 
to be established later. 

Consider the model depicted in Fig. [H where a legitimate user (Alice) wants to send messages 
to another user (Bob). Alice encodes a message s, represented by a discrete RV, into a codeword, 
represented by the complex random sequence of length n, x n = (x(l), . . . , x(n)) £ C n , for 
transmission over the channel. Bob observes the output of a discrete-time channel (the legitimate 
channel), which at time % is given by 



where he £ C is the quasi-static amplitude gain of the legitimate channeljj and wg(i) ~ A/" c (0, of 
is AWGN with power of per complex sampled Bob makes a decision se on s based on the 
output ye, incurring in an error probability equal to ¥{§e ^ s}. A third party (Eve) is also 
capable of eavesdropping on Alice's transmissions. Eve observes the output of a discrete-time 
channel (the eavesdropper's channel), which at time i is given by 



where h c £ C is the quasi-static amplitude gain of the eavesdropper channel, and w e (i) ~ 
jV c (0, of) is AWGN with power o\ per complex sample. It is assumed that the signals x, he, 
h e , we, and w c are mutually independent. Each codeword transmitted by Alice is subject to the 
average power constraint of Pe per complex symbol, i.e., 



y e (i) = h e ■ x(i) + w e (i), 1 < i < n, 



y c {i) = h c ■ x(i) + w e (i), 1 < i < n, 




(2) 



i=i 



4 The amplitude gain h can be related to the power gain in 10 as g(rg,Zi) = \ht\ 2 , where re and Zi are, respectively, the 
length and random propagation effects of the legitimate link. 

5 We use A4(0, a 2 ) to denote a CS complex Gaussian distribution, where the real and imaginary parts are IID JV(0, c 2 /2). 
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We define the transmission rate between Alice and Bob as 

a H(s) 



n 

where H(-) denotes the entropy function. 

Throughout the paper, we use strong secrecy as the condition for information-theoretic security, 
and define it as follows ll38Tl . 

Definition 2.1 (Strong Secrecy): The rate ^* is said to be achievable with strong secrecy if 
Ve > 0, for sufficiently large n, there exists an encoder-decoder pair with rate %^ satisfying the 
following conditions: 

H(s\y:)>H(s)-e, 
P{s* ^ s} < e. 

We define the maximum secrecy rate (MSR) ^ of the legitimate channel to be the maximum 
rate f^* that is achievable with strong secrecy^ If the legitimate link operates at a rate below 
the MSR there exists an encoder-decoder pair such that the eavesdropper is unable to obtain 
additional information about s from the observation y™, in the sense that H(s\y™) approaches 
H(s) as the codeword length n grows. It was shown in ifToTl . ||39l that for a given realization of 
the channel gains ha, h c , the MSR of the Gaussian wiretap channel is 

12' 



io g2 ( i + y - io g2 i + ^y 



(3) 



in bits per complex dimension, where [x] + = max{x,O}0 In the next sections, we use these 
basic results to analyze secrecy in large-scale networks. 



6 See 1201 for a comparison between the concepts of weak and strong secrecy. In the case of Gaussian noise, the MSR is the 
same under the weak and strong secrecy conditions. 

'Operationally, the MSR ^ can be achieved if Alice first estimates hi and h c (i.e., has full CSI), and then uses a code that 
achieves MSR in the AWGN channel. Estimation of h c is possible, for instance, when Eve is another active user in the wireless 
network, so that Alice can estimate the eavesdropper's channel during Eve's transmissions. As we shall see, the iS-grwph model 
presented in this paper relies on an outage formulation, and therefore does not make assumptions concerning availability of full 
CSI. 
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C. iS -Graph 

Consider a wireless network where legitimate nodes and potential eavesdroppers are randomly 
scattered in space, according to some point process. The iiS-graph is a convenient geometrical 
representation of the information-theoretically secure links that can be established on such 
network. In the following, we introduce a precise definition of the iiS-graph, based on the notion 
of strong secrecy. 

Definition 2.2 (iS-graph): Let IL; = {x^ C W 1 denote the set of legitimate nodes, and 
n e = {ej} C M d denote the set of eavesdroppers. The iS-graph is the directed graph G = {IL;, £} 
with vertex set IL and edge set 

£ = {x~xj : ^(x^xj) > g}, (4) 

where q is a threshold representing the prescribed infimum secrecy rate for each communication 
link; and $(s(xi, Xj) is the MSR, for a given realization of the channel gains, of the link between 
the transmitter Xi and the receiver Xj, given by 



with 



g 2 1 + ^—^ - log 2 ' 



(5) 



e* = argmax P rx (xi, e k ). (6) 

efeen c 

This definition presupposes that the eavesdroppers are not allowed to collude (i.e., they cannot 
exchange or combine information), and therefore only the eavesdropper with the strongest 
received signal from x% determines the MSR between Xi and Xj. The case of colluding eaves- 
droppers is analyzed in Section [VTJ 

The iiS-graph admits an outage interpretation, in the sense that legitimate nodes set a target 
secrecy rate q at which they transmit without knowing the channel state information (CSI) of 
the legitimate nodes and eavesdroppers. In this context, an edge between two nodes signifies 
that the corresponding channel is not in secrecy outage. 

Consider now the particular scenario where the following conditions hold: (a) the infimum 
desired secrecy rate is zero, i.e., g — 0; (b) the wireless environment introduces only path loss, 
i.e., Z XiyX . = 1 in (QQ); and (c) the noise powers of the legitimate users and eavesdroppers are 
equal, i.e., erf = a\ = a 2 . Note that by setting g = 0, we are considering the existence of secure 
links, in the sense that an edge Xix] is present if and only if %s{x^ Xj) > 0. Thus, a positive (but 
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possibly small) rate exists at which Xi can transmit to Xj with information-theoretic security. In 
this scenario, © reduces td_ 



log 2 1 



P e ■ g(\xi - xj 



a" 



log 2 I 1 



P e ■ g{\xi - e* 



G 1 



where 



e = argmm \Xi — e^l, 
e fe en e 



(7) 



(8) 



i.e., e* is the eavesdropper closest to the transmitter Xi. Since g(-) is strictly decreasing with its 
argument, the edge set £ in © simplifies in this case to 



£ 



e = argmm |x» — e^i 
e fe en c 



(9) 



i.e., the transmitter can communicate with information-theoretic security with at some 
positive rate if and only if Xj is closer to Xi than any other eavesdropper. Thus, in the special 
case where g = 0, Z x . )Xj = 1, and erf = erf, the iiS-graph is characterized by a simple geometrical 
description. Fig. [2] shows an example of such an iS-graph. Note that the description in © - 
and therefore all results that will follow from it - do not depend on the specific form of the 
function g(r), as long as it satisfies the conditions in Section III-AI The special case in ® 
was also considered in 11211 . starting from a formulation of security based on geometrical - not 
information-theoretic - considerations. 



D. Poisson iS-Graph 

The spatial location of the nodes can be modeled either deterministically or stochastically. 
However, in many important scenarios, only a statistical description of the node positions is 
available, and thus a stochastic spatial model is more suitable. In particular, when the node 
positions are unknown to the network designer a priori, we may as well treat them as completely 
random according to a homogeneous Poisson point process ll23Tl rl The Poisson process has 
maximum entropy among all homogeneous processes [|40l . and serves as a simple and useful 
model for the position of nodes in a network. 

8 For notational simplicity, when Z = 1, we omit the second argument of the function g(r, z) and simply use g(r). 
9 The spatial Poisson process is a natural choice in such situation because, given that a node is inside a region TZ, the PDF of 
its position is conditionally uniform over TZ. 
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Definition 2.3 (Poisson iS-graph): The Poisson iS-graph is an iiS-graph where n £ , Il e C M. d 
are mutually independent, homogeneous Poisson point processes with densities X e and A e , 
respectively. 

In the remainder of the paper (unless otherwise indicated), we focus on Poisson iiS-graphs in 
IR 2 . We use {Re^}^ and {-R e ,i}^i to denote the ordered random distances between the origin 
of the coordinate system and the nodes in LLj and Il e , respectively, where R^i < Rip < . . . and 

Re,l < Re,2 < 



III. Local Connectivity in the Poisson zS-Graph 

In graph theory, the node degrees are an important property of a graph, since they describe 
the connectivity between a node and its immediate neighbors. In a graph, the in-degree and 
out-degree of a vertex are, respectively, the number of edges entering and exiting the vertex. 
Since the i5-graph is a random graph, the in- and out-degrees of the legitimate nodes are RVs. 
In this section, we provide a complete probabilistic characterization of both in-degree iV in and 
out-degree N out of a typical node in the Poisson iiS-graph^] We first consider the simplest 
case of q = (the existence of secure links), Z XijXj = 1 (path loss only), and o 2 = of (equal 
noise powers) in Sections IIII-A1 IIII-B1 and IIII-CI This scenario leads to an iiS-graph with a 
simple geometric description, thus providing various insights that are useful in understanding 
more complex cases. Later, in Sections IIII-DI and IIII-EL we separately analyze how the node 
degrees are affected by wireless propagation effects other than path loss (e.g., multipath fading), 
a non-zero secrecy rate threshold g, and unequal noise powers of,a"|. 

We start by showing that under the simple geometric description in dU, the distributions of 
the in- and out-degree of a node depend exclusively on the ratio of densities y-. 

Property 3.1: In the case of g — 0, Z Xi)Xj = 1, and o 2 = of, the probability mass functions 
(PMFs) PN out (n) and p^. n (n) of a node depend on the densities A^ and A e only through the 
ratio ^. 



10 ln this paper, we analyze the local properties of a typical node in the iS-graph. This notion is made precise in 1411 Sec. 
4.4] using Palm theory. Specifically, Slivnyak's theorem states that the properties observed by a typical legitimate node x £ He 
are the same as those observed by node in the process Tie U {0}. Informally, a typical node of 11^ is one that is uniformly 
picked from a finite region expanding to R 2 . In this paper, we often omit the word "typical" for brevity. 
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Proof: Consider a given realization of the processes II^ and Il e , with densities \ e and A e , 
respectively. This induces an iiS-graph G = (IL;, £) with vertex set IL; and edge set £ given by ©. 
We now apply the transformation x — > yfcx in IR 2 , resulting in scaled processes yfclle and A/cII e , 
with densities and ^, respectively. Note that the 2<S-graph G = {y/cU e ,£} corresponding to 
the scaled processes has exactly the same edge set as G, because the scaling transformation does 
not change the geometrical configuration of the network. We then conclude that the node degree 
distributions before and after scaling are the same, and hence only depend on the ratio ^. This 
concludes the proof. □ 



A. In-Degree Characterization 

The characterization of the in-degree relies on the notion of Voronoi tessellation, which we 
now introduce. A planar tessellation is a collection of disjoint polygons whose closures cover 
IR 2 , and which is locally finite (i.e., the number of polygons intersecting any given compact set 
is finite). Given a generic point process IT = {xj} C IR 2 , we define the Voronoi cell C Xi of the 
point Xi as the set of points of IR 2 which are closer to Xi than any other point of n, i.e., 

C Xi = {y e M 2 : \y - Xi\ <\y - Xj\,Wxj ^ £;}. 

The collection {C Xj } of all the cells forms a random Voronoi tessellation with respect to the 
underlying point process II. Let C denote the typical Voronoi cell, i.e., the Voronoi cell associated 
with a point placed at the origin, according to Slivnyak's theorem. Using the notions just 
introduced, the following theorem provides a probabilistic characterization of the in-degree of 
the iS-graph. 

Theorem 3.1: The in-degree N- m of a typical node in the Poisson iiS-graph has the following 
moment generating function (MGF) 



{exp 



M,v in ( S )=E<!exp(^4(e s -l)) }, (10) 



where A is the area of a typical Voronoi cell induced by a unit-density Poisson process. 
Furthermore, all the moments of N in are given by 

where S(n, k), 1 < k < n, are the Stirling numbers of the second kind Il42l Ch. 24]. 
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Proof: Using Slivnyak's theorem PTl Sec. 4.4], we consider the process 11^ U {0} obtained 
by adding a legitimate node to the origin of the coordinate system, and denote the in-degree 
of the node at the origin by N- m . The RV iV in corresponds to the number of nodes from the 
process that fall inside the typical Voronoi cell C constructed from the process Il e U {0}. 
This is depicted in Fig. HJ Denoting the random area of such a cell by A, the MGF of N- m is 
given by 

M Nin (s)=E{e sN ^} 

= E{ex P (X e A(e s - 1))}, 

where we used the fact that conditioned on A, the RV iV in is Poisson distributed with parame- 
ter XiA. If A denotes the random area of a typical Voronoi cell induced by a unit-density Poisson 
process, then A = A\ e and (flOl) follows. This completes the first half of the proof. 
To obtain the moments of N- m , we use Dobinski's formula ll43l 

oo n 
fc=0 ' k=l 

which establishes the relationship between the n-th moment of a Poisson RV with mean /i and 
the Stirling numbers of the second kind, S(n, k). Then, 

E{N£} = E{E{NP\A}} 

= Elj2(X e A) k S(n,k) 

I k=l 



it(¥) k S(n,k)E{A k }, 
k=i ^ e ^ 



for n > 1. This is the result in (fTT|) and the second half of proof is concluded. □ 
Equation (|TT|) expresses the moments of N in in terms of the moments of A. Note that the 
Stirling numbers of the second kind can be obtained recursively as 

S(n, k) = S(n - 1, k - 1) + kS(n - 1, k), 
S(n, n) = S(n, 1) = 1, 



or explicitly as 



S(n,AO = ±X)(-l) i (f)(*-0 B . 
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Table |n] provides some values for S(n, k). In general, E{A fc } cannot be obtained in closed form, 
except in the case of k — 1, which is derived below in (fl4l) . For k = 2 and k — 3, E{,4 fc } 
can be expressed as multiple integrals and then computed numerically R4l - ll46ll . Alternatively, 
the moments of A can be determined using Monte Carlo simulation of random Poisson-Voronoi 
tessellations ll4~7l - ||4~9l . The first four moments of A are given in Table HITl 

The above theorem can be used to obtain the in-connectivity properties a node, such as the 
in-isolation probability, as given in the following corollary. 

Corollary 3.1: The average in-degree of a typical node in the Poisson z5-graph is 

E{AU = ^ (12) 

and the probability that a typical node cannot receive from anyone with positive secrecy rate 
(in-isolation) is 

p in _ iso i = E{e-^ A }. (13) 
Proof: Setting n = 1 in CCD, we obtain E{iV in } = ^E{A}. Noting that 

A= l{z G C }dz, 



where C is the typical Voronoi cell induced by a unit-density Poisson process II, we can write^ 

E{A}= [ [ F{zeC }dz (14) 
= / / F{U{B z (\z\)} = 0}dz (15) 

J J R2 



2tt poo 

e-^rdrdO 



o Jo 
= 1. 

Equation (fT4l) follows from Fubini's Theorem, while (fT5l) follows from the fact that, for any 
z E M 2 , the event {z e Co} is equivalent to having no points of II in as depicted in 

Fig. |5(a)| This completes the proof of (fT2l) . To derive (fT3l . note that the RV N in conditioned 



on A is Poisson distributed with parameter X e A, and thus p in _ isol = £>7v in (0) = E{p A r in | J 4(0)} = 
Ele"^ A j. □ 



"We use B x (p) — {y £ K 2 : \y — x\ < p] to denote the closed two-dimensional ball centered at point x, with radius p. 
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We can obtain an alternative expression for (TT3T ) by performing a power series expansion of 
the exponential function, resulting in 

This equation expresses j>i n — i SO i as a power series with argument ^, since E{v4 fe } are determin- 
istic. The power series can be truncated, since the summands become smaller as k — > oo. 



5. Out-Degree Characterization 

Theorem 3.2: The out-degree iV out of a typical node in the Poisson i5-graph has the following 
geometric PMF 

"-^GMy^)' n> -°- <i6) 

Proof: We consider the process II^ U {0} obtained by adding a legitimate node to the 
origin of the coordinate system, and denote the out-degree of the origin by N ont . The RV 7V out 
corresponds to the number of nodes from the process IT^ that fall inside the circle with random 
radius i? e ,i centered at the origin, i.e., iV ou t = : R^i < R e ,i}- This is depicted in Fig. [3] 

To determine the PMF of iV out , consider the one-dimensional arrival processes Ylg = {Rji}^ 
and n c = {-Rei)£=L- As can be easily shown using the mapping theorem ll25l Section 2.3], 
Hi and Il e are independent homogeneous Poisson processes with arrival rates ttA^ and 7rA e , 
respectively. When there is an arrival in the merged process U Il e , it comes from process 11^ 
with probability p = ^^x = a^+a ' anc * ^ rom c w ^ tn probability 1 — p — A ^ A , and these 
events are independent for different arrivals [50] . Since the event {iV ou t = n} is equivalent to the 
occurrence of n arrivals from 11^ followed by one arrival from n c , then we have the geometric 
PMF PN out (n) = p n (l — p), n > 0, with parameter p = A ^ A . This is the result in (TT6l) and the 
proof is completed. □ 

Note that this particular result was also derived in [|2T]|. The above theorem can be used to 
obtain the out-connectivity properties a node, such as the out-isolation probability, as given in 
the following corollary. 

Corollary 3.2: The average out-degree of a typical node in the Poisson iiS-graph is 

E{iV out } = ^, (17) 
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and the probability that a typical node cannot transmit to anyone with positive secrecy rate 
(out-isolation) is 

Pout-isol = T ~~T~ ■ (18) 

A£ + A e 

Proof: This follows directly from Theorem 13 .21 □ 

C. General Relationships Between In- and Out-Degree 

We have so far considered the probabilistic distribution of the in- and out-degrees in a separate 
fashion. This section establishes a direct comparison between some characteristics of the in- and 
out-degrees. 

Property 3.2: For the Poisson iiS-graph with A^ > and A e > 0, the average degrees of a 
typical node satisfy 

E{iV in } = E{iV out } = ^. (19) 

Proof: This follows directly by comparing (fTTb and (PT21) . □ 
The property E{iVi n } = E{iV ou t} is valid in general for any directed random graph. 
Property 3.3: For the Poisson iiS-graph with X e > and A e > 0, the probabilities of in- and 
out-isolation of a typical node satisfy 

Pin-isol < Pout-isol- (20) 

Proof: Let n e {7?.} = #{n e fl 1Z} denote the number of eavesdroppers inside region 1Z. 
With this definition, we can rewrite the edge set E in ® as 

£ = {x^:U e {B Xi (\x l -x J \} = 0}, (21) 

i.e., Xi is connected to Xj if and only if the ball centered at Xi with radius | free of 

eavesdroppers. We consider the process 11^ U {0} obtained by adding a legitimate node to the 
origin of the coordinate system. Let Xj denote the ordered points in process IL of legitimate 
nodes, such that |xi| < |^ 2 | < • • •• From (|2T|) . the node at the origin is out-isolated if and only 
if n e {B (|^|)} > 1 for all j > 1. This is depicted in Fig. [5(b)] Since the balls B (|%|), j > 1, 
are concentric at the origin, we have that 

Pout-i S oi = P{n e {£ (N)} > i}- 
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Similarly, we see from (I2TT) that the node at the origin is in-isolated if and only if n e {£>,g 4 (|xj|)} > 



1 for alii > 1. This is depicted in Fig. |5(c)| Then, 

Pin-isol = P |/\n e {%(|x,|)} > l| (22) 

<P{n e {S, 1 (|a: 1 |)}>l} (23) 
= P{n e {i3 (|a; 1 |)}> 1} (24) 

Pout— isol - 

The fact that the inequality in ([23]) is strict proved in Appendix [A] Equation (124)) follows from 
the spatial invariance of the homogeneous Poisson process il e . This concludes the proof. □ 
Intuitively, out-isolation is more likely than in-isolation because out-isolation only requires that 
one or more eavesdroppers are closer than the nearest legitimate node x±. On the other hand, 
in-isolation requires that every ball B Xi (\xi\), i > 1, has one or more eavesdroppers, which is 
less likely. Property 13.31 can then be restated in the following way: it is easier for an individual 
node to be in-connected than out-connected. 



D. Effect of the Wireless Propagation Characteristics 

We have so far analyzed the local connectivity of the i5-graph in the presence of path loss 
only. However, wireless propagation typically introduces random propagation effects such as 
multipath fading and shadowing, which are modeled by the RV Z Xi>Xj in (OQ). In this section, we 
aim to quantify the impact of such propagation effects on the local connectivity of a node. 

Considering q = 0, of = of = o 2 , and arbitrary propagation effects Z Xi>Xj with PDF fz(z), 
we can combine © with the general propagation model of (OQ) and write 



where 



Pi -gQxi-Xjl^^ )\ ( P r g(\xi-e*\,Z xu£ 

log 2 1 + 5 ~ lo S2 



(25) 



e* = argmaxgOi - e k \,Z Xi>ek ). (26) 
e fc en e 

After some algebra, the edge set for the resulting z5-graph can be written as 

£ = \xlxj : g(\xi-Xj\,Z x . tXj ) > g{\xi - e*\, Z Xi>e *), e* = argmax#(|xi - e k \, Z Xi>ek ) \. (27) 
L e fc en e > 
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Unlike the case of path-loss only, where the out-connections of a node are determined only by 
the closest eavesdropper, here they are determined by the eavesdropper with the least attenuated 
channel. We start by characterizing the distribution of the out-degree by the following theorem. 

Theorem 3.3: For the Poisson ZiS-graph with propagation effects Z XitX . whose PDF is given 
by a continuous function fz{z), the PMF of the out-degree iV 0U t of a typical node is given in 
(fT6l) . and is invariant with respect to fz(z). 

Proof: We consider the process IT^ U {0} obtained by adding a legitimate node to the origin 
of the coordinate system, and denote the out-degree of the node at the origin by N out . For the 
legitimate nodes, let the distances to the origin (not necessarily ordered) be = \xi\, Xi 6 II^, 
and the corresponding channel propagation effects be Z^. Similarly, we can define R Cti = \ei\, 
ei E Il e , and Z Cji for the eavesdroppers. Define also the loss function as l(r, z) = l/g(r,z). We 
can now consider the one-dimensional loss processes for the legitimate nodes, A t = {1^}°^ 
with Le ti = l(Re t i, Z^i), and for the eavesdroppers, A c = {L C j}^ 1 with L c i = l(R e> i, Z Cti ). Note 
that loss process {Li ti } can be interpreted as a stochastic mapping of the distance process {Re,i}, 
where the mapping depends on the random sequence {Z ei } (a similar statement can be made for 
{L 6) i}, {R e ,i}, and {Z c ^}). With these definitions, the out-degree of node can be expressed as 
N ut = #{Le,i '■ Li ti < minfc L e ,ifc}> i- e -' ^ 1S me number of occurrences in the process Ai before 
the first occurrence in the process A e . In the remainder of the proof, we first characterize the 
processes and A e ; then, using appropriate transformations, we map them into homogeneous 
processes, where the distribution of A^ out can be readily determined. 

Since the RVs {Z^i} are IID in i and independent of {Ri,i}, we know from the marking 
theorem ll25l Section 5.2] that the points {(Re,i, Z^)} form a non-homogeneous Poisson process 
on IR + x M + with density 2ir\irfz(z), where fz(z) is the PDF of Z^. Then, from the mapping 
theorem |j25l Section 2.3], Ai = {l(Re,i, Ze,i)} is also a non-homogeneous Poisson process on 
R + with density denoted by Aa £ (/)o Furthermore, the process A^ can be made homogeneous 
through the transformation M\ e (t) = J* \\ e (l)dl, such that M\ e (Ae) is a Poisson process with 



l2 In our theorem, the continuity of the function fz(z) is sufficient to ensure that Ai is a Poisson process. In general, we may 
allow Dirac impulses in fz(z), as long as the distinct points {(Rt,i, Ze^)} do not pile on top of one another when forming the 
process A e = {l(Re,i, Zi t i)}. 
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density 1. The homogenizing function M Ae (t) can be calculated as follows 



M Ae (t)= [ K( l )dl 




Jo 

II 

J J 0<l(r,z)<t 



2n\ir fz e (z)drdz 



Using a completely analogous reasoning for the process A e , its homogenizing function M Ae (t) 
can be written as 



But since fz t (z) = fz c ( z )> it follows that M Ae (t) = f-M Ae (t). The out-degree N out can 
now be easily obtained in the homogenized domain. Consider that both processes and 
A c are homogenized by the same transformation M Ae (-), such that Ma^(Ai) and M Ae (A e ) are 
independent Poisson processes with density 1 and j 1 . Furthermore, since M Ae (•) is monotonically 
increasing, N ont can be re-expressed as 



In this homogenized domain, the propagation effects have disappeared, and the problem is 
now equivalent to that in Theorem 13.21 Specifically, when there is an arrival in the merged 
process M Al (h{) U M Al (K c ), it comes from process M Ai (Ai) with probability p = 1+ x /\ e = 
A , and from M Ae (A c ) with probability l—p= A ^ A . As a result, A^ out has the geometric 
PMF PN out ( n ) = £> n (l — p), n > 0, with parameter p = A ^ A . This is exactly the same PMF 
as the one given in (Tl6l) . and is therefore invariant with respect to the distribution fz( z )- This 
concludes the proof. □ 
Intuitively, the propagation environment affect both the legitimate nodes and eavesdroppers 
in the same way (in the sense that Zg^ and Z c ti have the same distribution), such that the PMF 
of Aout is invariant with respect to the PDF fz( z )- However, the PMF of A^ in does depend on 
fz(z) m a non-trivial way, although its mean remains the same, as specified in the following 
corollary. 




Nout = #{L e ,i ■ Li,% < minL Cjfc }, 



A' 



= #{Lu : M Ai (L iti ) < M Ae (mmL C!k )}. 
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Corollary 3.3: For the Poisson ?<S-graph with propagation effects Z XuX . distributed according 
to fz(z), the average node degrees are 

E{iV in } = E{iV out } = ^, (28) 

for any distribution fz{z). 

Proof: This follows directly from Theorem 13.31 and the fact that E{iV in } = E{iV out } in any 
directed random graph. □ 
We thus conclude that the expected node degrees are invariant with respect to the distribution 
characterizing the propagation effects, and always equal the ratio y of spatial densities. 

E. Effect of the Secrecy Rate Threshold and Noise Powers 

We have so far analyzed the local connectivity of the ZiS-graph based on the existence of 
positive MSR, by considering that the infimum desired secrecy rate is zero, i.e., g = in ©. 
This implies that the edge x~[xj is present if and only if there exists a positive rate at which Xi 
can transmit to Xj with information-theoretic security. We have furthermore considered that the 
noise powers of the legitimate users and eavesdroppers are equal, i.e., of = of in ©. Under 
these two conditions, the iiS-graph can be reduced to the simple geometric description in ©, 
where the edge Xix] is present if and only if Xj is closer to Xi than any other eavesdropper. 
In this section, we study the effect of non-zero secrecy rate threshold, i.e., g > 0, and unequal 
noise powers, i.e., of ^ of, on the i<S-graph. 

Considering Z Xi>Xj = 1 and arbitrary noise powers erf, of, we can combine © with the general 
propagation model of (OQ) and write 



f^g(Xj, Xj t 

where 



2 / *^&2 \ 1 o 



(29) 



argmin \xi — e^\. (30) 

e fe en c 



We can now replace this expression for ^(xi, Xj) into © while allowing an arbitrary threshold g. 
After some algebra, the edge set for the resulting iiS-graph can be written as 



o? „ „ o? 



£ = : g{\ Xi - x 3 \) > -+2°g{\xi - e*\) + M2° - 1), e* = argmin \x t -e k \\. (31) 
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By setting g = and af = of in ( |3T| ) we obtain the edge set in © as a special case. However, 
for arbitrary parameters g, of, of, the ZiS-graph can no longer be characterized by the simple 
geometric description of ©. We now analyze the impact of the secrecy rate threshold g and the 
noise powers of, of on the average node degrees, for a general channel gain function g(r). 

Property 3.4: For the Poisson iiS-graph with edge set in (1311) and any channel gain func- 
tion g{r) satisfying the conditions in Section [Tl-AL the average node degrees E{iV out } = E{A^ in } 
are decreasing functions of g and of, and increasing functions of of. 

Proof: We prove the theorem with a coupling argument. We consider the process IL U {0} 
obtained by adding a legitimate node to the origin of the coordinate system, and denote the 
out-degree of the node at the origin by N out . Let R e i = min eie n c |e*| be the random distance 
between the origin and its closest eavesdropper. We first consider the variation of E{iV 0U t} with 
g, for fixed of, of. Let X(g) = {a* G IL : g(\ Xl \) > ^2 s g(R e>1 ) + ^(2 e - 1)} be the set of 
legitimate nodes to which the origin is out-connected. With this definition, 

E{iV out (o)}=E nfA , 1 {#X(o)}, 

2 2 

where we have explicitly indicated the dependence of E{iV out } on g. Since ^2 & g(R e ^) + ^(2 e — 
1) is increasing in g, for each realization of II and R^i we have that X(gi) D X(g 2 ), when- 
ever < g x < g 2 . This implies that E n ,,ij C!l {#X(oi)} > E UeAl {#X(g 2 )}, or equivalently, 
^•{N out (gi)} > E{A^ out (o 2 )} for < gi < g 2 , and thus E{iV out (o)} is decreasing with g. A 
similar argument holds for the parameters o|,Og, showing that E{iV out } is decreasing with a\ 
and increasing with o^. This concludes the proof. □ 
In essence, by increasing the secrecy rate threshold g, the requirement C s (xi,Xj) > g for any 
two nodes Xi,Xj to be securely connected becomes stricter, and thus the local connectivity (as 
measured by the average node degrees) becomes worse. On the other hand, increasing af or 
decreasing o^ makes the requirement C s (xi,Xj) > g harder to satisfy for any two legitimate 
nodes Xi,Xj. As a result, the local connectivity (as measured by the average node degrees) 
becomes worse. 

The exact dependence of the average node degree on the parameters g, aj, a% depends on the 
function g(r). To gain further insights, we now consider the specific channel gain function 

g(r) = ± r>0. (32) 
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This function has been widely used in the literature to model path loss behavior as a function of 
distance, and satisfies the conditions in Section III-AI Replacing (l32l) into (1311) and rearranging 
terms, the edge set reduces to 



£ = { x^j : \xi —Xj\ < — — — 7T72fe' e * = ar g min \ x i - e k\ 

e *\2b\ " e fc en c 



(33) 

For this case, a characterization of the first order moments of N hl and iV out is possible, and is 
provided in the following theorem. 

Theorem 3.4: For the Poisson ZiS-graph with secrecy rate threshold g, noise powers (t\,g\, 
and channel gain function g(r) = -§f> the average node degrees are 

/°° xe~^^ x 
—j- b dx (34) 
(p* + £(2* - l)x») 

< ¥ " ITS- 05) 

A ^ (dog i d (2" i\\ 

Proof: We consider the process IL: U{0} obtained by adding a legitimate node to the origin 
of the coordinate system, and denote the out-degree of the node at the origin by iV out . Let 
i? e ,i — min e;e n c \ei\ be the random distance between the origin and its closest eavesdropper. 



Define the function 



Hr) = — : -T^, r>0, (36) 

2f> ' 



I" 



so that (|33l) can simply be written as S = {xiXj : \xi — Xj\ < tp(\xi — e*|)}. This function is 
depicted in Figure [H The average out-degree is then given by 

E{iV out } = E n , Ail {n,{£ (^ e)1 ))}} 

= 7r\ e E Rsl {i ! \R e , 1 )} 

Defining X = R^ t , we can write 

E{iV out } = ttA.Ex J — ^ _ I (37) 

l(£2« + g(2«-l)X>) J 

f°° x 
tx\p I -jrTrX^^dx, 

+ %(2e- l)x b 
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where we used the fact that X is an exponential RV with mean This proves the result in 
(|34|) . To obtain the upper bound, we note that the function inside the expectation in (l37l) is 
concave in x, and apply Jensen's inequality as follows 

\ f 1 



E{iV out } < 



Ae ( d 2 s + d (2q - i)Y /b 



This is the result in (1351) . Noting that E{AT in } = E{iV ou t} for any directed random graph, the 
proof is concluded. □ 



F. Numerical Results 

Figure [6] compares the PMFs of the in- and out-degree of a node. We clearly observe that the 
RV N- m does not have a geometric distribution, unlike the RV N out . However, the two RVs have 
the same mean j^, according to Property 13.21 

Figure [7] compares the probabilities of out-isolation and in-isolation of a node for various 
ratios The curve for j5 out „ iso i was plotted using the closed form expression in ( TT8T ). The 
curve for p m - mo \ was obtained according to (PT31) through Monte Carlo simulation of the random 
area A of a typical Voronoi cell, induced by a unit-density Poisson process. We observe that 
Pi n _i SO i < Pout-isoi for any fixed ^, as proved in Property [33J 

Figure [9] illustrates the effect of the secrecy rate threshold g on the average node degrees. For 
the case of g(r) = m particular, it compares the exact value of E{iV out } given in (1341) with 
its upper bound in (1351) . We observe that the average node degree attains its maximum value 
of y — 10 at q = 0, and is monotonically decreasing with q. As proved in Property 13.41 such 
behavior occurs for any function g(r) satisfying the conditions in Section ITl-AI Furthermore, we 
can show that the upper bound is asymptotically tight - in the sense that the difference between 
the exact average node degree and its upper bound approaches - in the following two extreme 
cases: 

/ 2\ 1 / b 

• q — > 0: In this regime, both (|34|) and (1351) approach ^ y%) , and thus the bound is 
asymptotically tight. 

. P £ ->■ oo: In this high-SNR regime, both (O and ([35J converge to ^ [%2~ Q \ , and thus 
the bound is asymptotically tight. 
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IV. Techniques for Communication with Enhanced Secrecy 

Based on the results derived in Section [nil we observe that even a small density of eavesdrop- 
pers is enough to significantly disrupt connectivity of the i5-graph. For example, if the density 
of legitimate nodes is half the density of eavesdroppers, then from (fT9l) the average node degree 
is reduced to 2. In this section, we explore two techniques for communication with enhanced se- 
crecy: i) sectorized transmission, whereby each legitimate node is able to transmit independently 
in L sectors of the plane (e.g., through the use of directional antennas); and ii) eavesdropper 
neutralization, whereby legitimate nodes are able to physically monitor its surrounding area and 
guarantee that there are no eavesdroppers inside a neutralization region 9 (e.g., by neutralizing 
such eavesdroppers). For these two techniques, we quantify the improvements in terms of the 
resulting average node degree of the i<S-graph. 

A. Sectorized Transmission 

We have so far assumed that the legitimate nodes employ omnidirectional antennas, distributing 
power equally among all directions. We now consider that each legitimate node is able to transmit 
independently in L sectors of the plane, with L > 1. This can be accomplished, for example, 
through the use of L directional antennas. In this section, we characterize the impact of the 
number of sectors L on the local connectivity of the iiS-graph. 

With each node Xj 6 IT, we associate L transmission sectors {Sf 1 }^ , defined as 

Sf ] = jz e R 2 : & + (/ - 1) ^ < < 4>i + lj\ , l = l...L, 

where {(fii}^ are random offset angles with an arbitrary joint distribution. The resulting ZiS-graph Gl = 
{Hi, El] has an edge set given by 

£ L = I XjXj : \xi — Xj\ < \xi — e*\, e* = argmin |xj — e^l, S* = {S® : Xj G S®} \. (38) 
L e fc en e n5* > 

Here, S* is the transmission sector of Xi that contains the destination node Xj, and e* is the 

eavesdropper inside S* that is closest to the transmitter x.- L . Then, the secure link Xix] exists if 

and only if xj is closer to Xj than any other eavesdropper inside the same transmission sector 

where the destination Xj is located. We start by characterizing the distribution of the out-degree 

by the following theorem. 
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Theorem 4.1: For the Poisson i<S-graph G L with L sectors, the out-degree iV out of a node has 
the following negative binomial PMF 

Proof: We consider the process Ug U {0} obtained by adding a legitimate node to the origin 
of the coordinate system, and denote the out-degree of the node at the origin by N out . This is 
depicted in Fig. [TOl Consider the set of legitimate nodes in the sector <S^. Let {R^p i ]°l l be 
the distances (not necessarily ordered) from these legitimate nodes and the origin, such that 
Ftfl = \xf |, with {xf } = He C\S^. For the eavesdroppers, we similarly define {-R^il^i' sucn 
that R^l = |ef | with {ef^} = H e nS®. Because the sectors <S® are non-overlapping and Ug is 
Poisson, the processes {R < j\}^ l are independent for different I (a similar argument can be made 
for the independence of {R^\} C *L 1 for different I). As a result, we can analyze the out-degrees of 
node in each sector, and add these independent RVs to obtain the total out-degree. Specifically, 

L 

N out = J2 N ont' ( 4 °) 

1=1 

where the RVs 

N®±#{R®:I$<ufoB®}, 

are IID in I. 

From the mapping theorem, we know that {(Rfl) 2 }°Z 1 and {(-R^i) 2 }^ are homogeneous 
Poisson processes with rates ^ and respectively. Following the steps analogous to the proof 
of Theorem 13.21 we can show that each RV N® t has the geometric PMF p M m (n) = p n (l — p), 

"out 

n > 0, with parameter p = x ^ x . In other words, each RV N^ t has the same distribution of the 
total out-degree with L = 1 . The PMF of N out with L sectors can be obtained through convolution 
of the individual PMFs p ^ , and results in a negative binomial PMF with L degrees of freedom 

"out 

having the same parameter p, i.e., PN out ( n ) — { L ~j^ 1 )p n (^- ~ p) L > n > 0, with p = x ^ x . This 
is the result in (l39l) and the proof is completed. □ 
When L = 1, (l39l) reduces to the PMF without sectorization given in (fT6l) . as expected. 
The above theorem directly gives the average node degrees as a function of L, as given in the 
following corollary. 

Corollary 4.1: For the Poisson iiS-graph Gl with L sectors, the average node degrees are 

E{N iQ } = E{N ont } = L^. (41) 
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Proof: Using W, we have that E{iV out } = LE{iV ouM } = L-^, with p = In 
addition, we have that E{iV in } = E{7V out } for any directed random graph, and (l4~TT) follows. □ 
We conclude that the expected node degrees increases linearly with the number of sectors L, 
and hence sectorized transmission is an effective technique for enhancing the secrecy of commu- 
nications. Figure [10] provides an intuitive understanding of why sectorization works. Specifically, 
if there was no sectorization, node would be out-isolated, due to the close proximity of the 
eavesdropper in sector . However, if we allow independent transmissions in 4 non-overlapping 
sectors, that same eavesdropper can only hear the transmissions inside sector S^ 4 \ Thus, even 
though node is out-isolated with respect to sector it may still communicate securely with 
legitimate nodes in sectors S^ 2 \ and . 



B. Eavesdropper Neutralization 

In some scenarios, the legitimate nodes may be able to physically inspect its surrounding area 
and guarantee that there are no eavesdroppers inside a neutralization region (for example, by 
deactivating such eavesdroppers). In this section, we characterize the impact of such region on 
the local connectivity of node. 

With each node Xi G 11^, we associate a neutralization set 0, around Xi that is guaranteed 
to be free of eavesdroppers. The total neutralization region can then be seen as a Boolean 
model with points {x^ and associated sets {©«}, i.e.ll£ 



e = U(si + ©i)- 



i=l 

Since the homogeneous Poisson process is stationary, it follows that is also stationary, in 
the sense that its distribution is translation-invariant. Since eavesdroppers cannot occur inside 0, 
the effective eavesdropper process after neutralization is Il e D 0, where = IR 2 \0 denotes the 
complement of ©o The resulting iiS-graph G e = {Ui,£®} has an edge set given by 

£ e = < Xix] : \xi — Xj\ < \xi — e*|, e* = argmin |x, — ek \ \ (42) 

13 In other fields such as materials science, the points {xt} are also called germs, and the sets {0i} are also called grains. 

14 In the materials science literature, Q is typically referred to as the occupied region, since it is occupied by grains. In our 
problem, however, O corresponds to a vacant region, in the sense that it is free of eavesdroppers. To prevent confusion with 
the literature, we avoid the use of the terms "occupied" and "vacant" altogether. 
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i.e., the secure link x[xj exists if and only if Xj is closer to Xi than any other eavesdropper that has 
not been neutralized. Since n e fl6 C n e , it is intuitively obvious that eavesdropper neutralization 
improves the local connectivity, and that such improvement is monotonic with the area of the 
neutralization set 0j. In the following, we consider the case of a circular neutralization set, 
i.e, Q.; = B (p), where p is a deterministic neutralization radius. We denote the corresponding 
ZiS-graph by G p . Even in this simple scenario, the full distributions of the corresponding node 
degrees N- m and N out are difficult to obtain, since the underlying process n e fl 6 is quite complex 
to characterize. However, it is easier to carry out an analysis of the first order moments, namely 
of E{iV out }. We can use this metric to compare eavesdropper neutralization with the other 
techniques discussed in this paper, in terms of their effectiveness in enhancing security. The 
following theorem provides the desired result. 

Theorem 4.2: For the Poisson iiS-graph G p with neutralization radius p, the average node 
degrees are lower-bounded by 

E{iV in } = E{iV out } > ^ (7rA e p 2 + e^" 2 ) . (43) 

Proof: We consider the process ILj U{0} obtained by adding a legitimate node to the origin 
of the coordinate system, and denote the out-degree of the node at the origin by N out . This 
is depicted in Fig. QTJ Let R e i = min efegricn Q |efc| be the random distance between the first 
non-neutralized eavesdropper and the origin. Let V(a, b) = {x E M 2 : a < \x\ < b} denote the 
annular region between radiuses a and b, and A{1Z} denote the area of the arbitrary region 1Z. 
Noting that 

iVout = Yl < R ^ 




l{\x\ < R £tl }U e (dx), 



we can use Fubini's theorem to write 

E{AUJ = X t [ [ P*{M < R 6jl }dx 

J J R 2 

= \ e irp 2 + Xi [ [ F x {\x\ < R e<1 }dx, (44) 
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where P x {-} denotes the Palm probability associated with point x of process TleU3 Appendix |B] 
shows that the integrand above satisfies 

P*-{M < R e ,i} > exp (-7rA e e- W (|x| 2 - p 2 )) . (45) 
Replacing (03) into ((44|) . we obtain 

E{iV out } > A.vrp 2 + A, / / exp(-7r\ e e~ x ^ 2 (\x\ 2 -p 2 ))dx 

J J V(p,oa) V J 

= A,vrp 2 + ^e A ^ 2 . 
A e 

Rearranging terms and noting that E{iV in } = E{iV out } for any directed random graph, we obtain 
the desired result in (1431) . This concludes the proof. □ 
We conclude that the expected node degrees increases at a rate that is at least exponential 
with the neutralization radius p, making eavesdropper neutralization an effective technique for 
enhancing secure connectivity. Such exponential dependence is intimately tied to the fact that the 
fractional area p@ = 1 — e~ Xenp2 of the neutralization region 6 also approaches 1 exponentially 
as p increases. 

C. Numerical Results 



Figure [121 illustrates effectiveness of eavesdropper neutralization in enhancing secure connec- 
tivity. In particular, it plots the average node degree versus the neutralization radius p, for various 
values of A e . We observe that E{iV out } increases at a rate that is at least exponential with the 
neutralization radius p, as expected from (1431) . Furthermore, the analytical lower-bound is in 
general very close to the simulated value of E{iV out }, and becomes tight in the following two 
asymptotic cases: 

• p — > 0: In this regime, the neutralization region vanishes, and therefore E{iV out } — > ^, 
as given in (fT9l) . Since right side of (l43l) also approaches ^ as p — > 0, the bound is 
asymptotically tight. 

• A e — > oo: In this regime, an eavesdropper will occurs a.s. at a distance close to p from the 
origin. As a result, E{iV out } is approaches the expected number of legitimate nodes inside 



15 Informally, the Palm probability P^{ } can be interpreted as the conditional probability F{-\x £ 11^}. Since the conditioning 
event has probability zero, such conditional probability is ambiguous without further explanation. Palm theory makes this notion 
mathematically precise (see 114 1 1 Sec. 4.4] for a detailed treatment). 



29 



the ball B (p), i.e., \eirp 2 . Since right side of (|43l) also approaches A^7rp 2 as A e — > oo, the 
bound is asymptotically tight. 

V. Maximum Secrecy Rate in the Poisson iS- Graph 

In this section, we analyze the MSR between a node and each of its neighbours, as well as 
the probability of existence of a non-zero MSR, and the probability of secrecy outage. 

A. Distribution of the Maximum Secrecy Rate 

Considering the coordinate system depicted in Fig. [3] and using ©, the MSR ^ :i between 
the node at the origin and its i-th closest neighbour, i > 1, can be written for a given realization 
of the node positions fl^ and Il e as 



i -log 2 (l + 



(46) 



in bits per complex dimension. For each instantiation of the random Poisson processes U e and 
n e , a realization of the RV 3^ is obtained. The following theorem provides the distribution of 
this RV. 

Theorem 5.1: The MSR 5^ between a typical node and its i-th closest neighbour, i > 1, is 
a RV whose cumulative distribution function (CDF) F^.(q) is given by 



j? t \ 1 ln2f7rA 



i - l)\b \a 



r2 



1 

+00 2 / / El \ b (El 

2 1 , / „2 



x / TTT^V -7rX £ -2— - 7rA e » 1 dz, (47) 



(2 




for g > 0. 

Proof: The MSR in ([46]) can be expressed as 5^ = - where = 

log 2 (l + and 5^ = log 2 (l + jgfcs) • The RV ^ is a transformation of the RV X { = 

through the monotonic function g(x) = log 2 (l + -rV), and thus its PDF is given by the 
rule fg, (q) = T-n-rrfxi (x) . Note that the sequence {XA^L-, represents Poisson arrivals on 

a* \g[x)\ x=g- 1 {g) 

the line with the constant arrival rate as can be easily shown using the mapping theorem |[25l 



Section 2.3]. Therefore, the RV X; has an Erlang distribution of order i with rate ir\ e , and its 
PDF is given by 

fx i { x ) = T- — m > x ^°- 
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Then, applying the above rule, /^.(g) can be shown to be 

Replace A^ with A e and setting i = 1, we obtain the PDF of ^ as 

f^g) = ln2^ fgV - 2 * , . exp I -vrA e I -f— I I, e > 0. (49) 



Since the sequences {Ri yi } c *L 1 and {-R e ,i}i^i are mutually independent, so are the RVs and 
This implies that CDF of ^ j = — ^] + can be obtained through convolution of 

f^ 4 {Q) and /^(e) as 

= 1 - F{Sd,i - ^ > £?} 

POO 

= 1 " / /«,>)*/*.(-*) (50) 

</£> 

for £ > 0. Replacing (l48l) and (l49l) into (|5Q|) . we obtain after some algebra 



(i-l)\b \a 2 



+oo 2^ / I Ei \ h I Ei \ b 



(2 2 

for q > 0. This is the result in (PTTl) and the proof is concluded. □ 



B. Existence and Outage of the Maximum Secrecy Rate 

Based on the results of Section IV-Al we can now obtain the probability of existence of a 
non-zero MSR, and the probability of secrecy outage. The following corollary provides such 
probabilities. 

Corollary 5.1: Considering the link between a typical node and its i-th closest neighbour, 
i > 1, the probability of existence of a non-zero MSR, p C xist,i = P{^s,i > 0}, is given by 
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and the probability of an outage in MSR, p utage,i(s) = ^{^Ks,i < o) for q > 0, is given by 

PoutageA^ (i-l)|6 

1 

P t \ b 
T 2 



-oc 



x/ ^in exp |-^l2^T) -^l^frri I** 2 (52) 



Q 

Proof: To obtain (15TT) . we note that the event > ^e} is equivalent to {iV out > i}. 

Thus, we use (Tl6l) to write 

Pexist,* = P{^i,i > ^} 



' V + A e y V A^ + A 



A, 



The expression for p O utage(£0 follows directly from (|47l) . □ 



C. Numerical Results 

Figure [13] shows the probability p cx ist,i of existence of a non-zero MSR from a typical node to 
its i-th neighbour, as a function of the eavesdropper density A e . It can be seen that the existence 
of a non-zero MSR ^ ti to any neighbour i becomes more likely as the value of A e increases. 
Furthermore, since R^i < Rg^ < • • as the value of i increases, the 2-th neighbour becomes 
further away, and the corresponding p cx i St ,i decreases. 

Figure [Q] shows the probability p ou tage,i of secrecy outage of a typical node transmitting to 
its i-th neighbour, as a function of the desired secrecy rate q. As expected, a secrecy outage 
become more likely as we increase the target secrecy rate q set by the transmitter. 

VI. The Case of Colluding Eavesdroppers 

We now aim to study the effect of colluding eavesdroppers on the secrecy of communications. 
In order to focus on the effect of eavesdropper collusion on the MSR of the legitimate link, we 
first consider in Sections IVI-AI to IVI-DI a single legitimate link with deterministic length r £ in 
the presence of a random process il e . Such simplification eliminates the randomness associated 
with the position of the legitimate nodes. We then consider both random processes LT^ and 
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II e in Section IVI-E1 and characterize the average node degree in the presence of eavesdropper 
collusion. 



A. Maximum Secrecy Rate of a Single Link 

We consider the scenario depicted in Fig. Q31 where a legitimate link is composed of two 
nodes: one transmitter located at the origin (Alice), and one receiver located at a deterministic 
distance rg from the origin (Bob). The eavesdroppers have ability to collude, i.e., they can 
exchange and combine the information received by all the eavesdroppers to decode the secret 
message. The eavesdroppers are scattered in the two-dimensional plane according to an arbitrary 
spatial process n e , and their distances to the origin are denoted by {-R e ,i}w, where i? e> i < i? e ,2 < 



Since the colluding eavesdroppers may gather the received information and send it to a central 
processor, the scenario depicted in Fig. [15] can be viewed as a SIMO Gaussian wiretap channel 
depicted in Fig. [16l Here, the input is the signal transmitted by Alice, and the output of the 
wiretap channel is the collection of signals received by all the eavesdroppers. We consider that 
Alice sends a symbol x E C with power constraint E{|x| 2 } < Pi. The vectors h e E C m and 
h c E C n represent, respectively, the gains of the legitimate and eavesdropper channels O The 
noise is represented by the vectors wi E C m and w c E C", which are considered to be mutually 
independent Gaussian RVs with zero mean and non-singular covariance matrices Y, t and S e , 
respectively. The system of Fig. [16] can then be summarized as 

y £ = hiX + w £ (53) 
y c = h e x + w c . (54) 



The scenario of interest can be obtained from the SIMO Gaussian wiretap channel in Fig. 
by appropriate choice of the parameters h^, h c , S^, and S c . 

In this section, we determine the MSR of the legitimate link, in the presence of colluding 
eavesdroppers scattered in the plane according to an arbitrary spatial process. The result is given 
in the following theorem. 



We use boldface letters to denote vectors and matrices. 
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Theorem 6.1: For a given realization of the arbitrary eavesdropper process n e , the MSR of 
the legitimate link is given by 



log 2 1 + 



Pi ■ g{n) 



at 



log 2 1 + 



(55) 



where Pi Y^Li 9(Re,i) — Pm,e is the aggregate power received by all the eavesdroppers. 

Proof: For a given realization of the channels h e and h e , it can be shown [j5TTl that 
yi = hjE^Vf and y e = hjE £ T 1 y e are sufficient statistics to estimate x from the corresponding 
observations yi and y e o Since sufficient statistics preserve mutual information [52], for the 
purpose of determining the MSR the vector channels in (f53T) and (|54l ) can equivalently be written 
in a (complex) scalar form corresponding to the Gaussian wiretap channel introduced in |[39ll . 
Then, the MSR ^ of the legitimate channel for a given realization of the channels and h c 
is given by 



log 2 



1 + hjZ^hePe 



(56) 



, E £ = crfli, and S c 



o-gloo, where a\ 



Setting = y/g(r e ), h c = y /g(R e>1 ), yfgjR^j, ■ ■ 
and al are the noise powers of the legitimate and eavesdropper receivers, respectively, and I n 
is the n x n identity matrix, (|56l ) reduces to (I551 ). This concludes the proof. □ 



B. Distribution of the Maximum Secrecy Rate of a Single Link 

Theorem 16. II is valid for a given realization of the spatial process n e . In general, the MSR 
of the legitimate link in (1551) is a RV, since it is a function the random eavesdropper distances 
{Re,i}iZi- In what follows, we analyze the case where il e is a homogeneous Poisson process on 
the two-dimensional plane with density A e , and the channel gain is of the form g(r) = 4f with 
b > 1. The following theorem characterizes the distribution of the MSR in this scenario. 

Theorem 6.2: If Il e is a Poisson process with density A e and g(r) = -|f> b > 1, the MSR ^ 



We use f to denote the conjugate transpose operator. 
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of the legitimate link is a RV whose CDF F^(g) is given by 

0, g<0, 

, 0<Q<%j, 

1, £?>^i, 



1-F p 

J rx 



^- \2-e-l 



(57) 



where ^ = log 2 ( 1 + ) is the capacity of the legitimate channel; C a is defined 



c 



1 — a 



r(2-a) cos(^) 



(58) 



with r(-) denoting the gamma function; and Fp (•) is the CDF of a skewed stable RV P^e, 
with parameter^ 



= p /? = !, 7 = 



(60) 



Proof: For g(r) = the MSR ^ of the legitimate channel in (1551) is a function of the 
total power received by the eavesdroppers, P rXje = Y^Li J&s- ^ ^ e is a Poisson process, the 
characteristic function of P rx e can be written as OTl 



Px,e ~ 



(61) 



for 6 > 1. Defining the normalized stable RV P rxe = P rXje 7~ 6 with 7 = nX e Cy b P^ ', we 
have that P rXje ~ «S (|, 1, l) from the scaling property [53]. In general, the CDF Fp (■) 
cannot be expressed in closed form except in the case where 6 = 2, which is analyzed in 
Section IVI-F[ However, the characteristic function of P rXie has the simple form of 4>p^ e (w) = 
exp (— {w] 1 ^ [l — j sign(w) tan (^)j), and thus Fp (•) can always be expressed in the integral 
form for numerical evaluation. 



18 We use S(a, /3, 7) to denote the distribution of a real stable RV with characteristic exponent a € (0, 2], skewness /3 € [— 1, 1], 
and dispersion 7 6 [0, 00). The corresponding characteristic function is 1531 



(«0 = 



exp(-7|^r [l-j/3sign( W )tan(^)]), a ^ 1, 
exp (-7H [l + j|/?sign(w)ln|w|]) , a = 1. 



(59) 
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Using (1551 ), we can now express F^(g) in terms of the CDF of P rXie , for < g < %j, as 

F^(g)=F{^<g} 




In addition, F^(g) = for g < and F^(g) = 1 for g > since the RV in (1551) satisfies 
< ^£ < %£, i.e., the MSR of the legitimate link in the presence of colluding eavesdroppers is 
a positive quantity which cannot be greater than the MSR of the legitimate link in the absence 
of eavesdroppers. This is the result in (1641) and the proof is complete. □ 



C. Existence and Outage of the Maximum Secrecy Rate of a Single Link 

Based on the results of Section IVI-Bl we can now obtain the probability of existence of a 
non-zero MSR, and the probability of secrecy outage for a single legitimate link in the presence 
of colluding eavesdroppers. The following corollary provides such probabilities. 

Corollary 6.1: If II e is a Poisson process with density A e and g{r) = b > 1, the probability 
of existence of a non-zero MSR in the legitimate link, p ex ist = > 0}, is given by 

= F «- (t.vfew) • (62) 

and the probability of an outage in the MSR of the legitimate link, p ou ta g c(f?) = < £>} for 

q > 0, is given by 



^outage 

id) 



X .0 



(63) 



where !^ = log 2 ( 1 + -^-y ) is the capacity of the legitimate channel; and Fp (•) is the CDF 

V r i a i / rx ' e 

of the normalized stable RV P rXie , with parameters given in (|60l ). 

Proof: The expressions for p ox ist and p uta gc (f?) follow directly from (I57T ). □ 
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D. Colluding vs. Non-Colluding Eavesdroppers for a Single Link 

We have so far considered the fundamental secrecy limits of a single legitimate link in the 
presence of colluding eavesdroppers. According to Theorem 16.11 such scenario is equivalent to 
having a single eavesdropper with an array that collects a total power = Pel I n 
particular, when the eavesdroppers are positioned according to an homogeneous Poisson process, 
Theorem 16.21 shows that the RV P rxe has a skewed stable distribution. 

We can obtain further insights by establishing a comparison with the case of a single legitimate 
link in the presence of non-colluding eavesdroppers. In such scenario, the MSR does not depend 
on all eavesdroppers, but only on that with maximum received power (i.e., the closest one, when 
only path loss is present). Thus, the total eavesdropper power is given by P rx>e = j^-. Using the 
fact that is exponentially distributed with rate 7rA e , the PDF of P rx>e can be written as 



h 



x 




x>0, 



and the CDF of the corresponding MSR can be easily determined from (1551) as 

0, q<0, 



exp 



/ 



V 



-7rA e 




0< Q<fKe, 



(64) 



1, Q>%£- 

From this CDF, we can readily determine the probability of existence of a non-zero MSR, and 
the probability of secrecy outage, similarly to the colluding case. Table [IV] summarizes the 
differences between the colluding and non-colluding scenarios for a single legitimate link. 



E. iS -Graph with Colluding Eavesdroppers 

To study the effect of colluding eavesdroppers, we have so far made a simplification concerning 
the legitimate nodes. Specifically, we considered only a single legitimate link with deterministic 
length rt as depicted in Fig. [T5J thus eliminating the randomness associated with the position 
of the legitimate nodes. We now revisit the iiS-graph model depicted in Fig. [2] where both 
legitimate nodes and eavesdroppers are distributed according to Poisson processes IT^ and Il e . In 
particular, the following theorem characterizes the effect of collusion in terms of the resulting 
average node degree in such graph. 
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Theorem 6.3: For the Poisson i5-graph with colluding eavesdroppers, secrecy rate thresh- 
old q — 0, equal noise powers cr| = a\, and channel gain function g(r) = b > 1, the average 
degrees of a typical node are 

E{iV in } = E{iV out } = ^ sine (I) , (65) 



where sinc(x) = 

Proof: We consider the process II^ U{0} obtained by adding a legitimate node to the origin 
of the coordinate system, and denote the out-degree of the node at the origin by iV out . Using 
(155T) . we can write 

Want = # {a* e II* : > 0} 
Tie : Rl < 




The average out-degree can be determined as 

E{iV out } = E ne ,nAMW}} 
= En e {A £ 7rz/ 2 } 

p \ 1/6' 

Pe 



( jr- 



where the RV P rxe has a stable distribution with parameters given in (|6Tb . As before, we define 



the normalized stable RV P rxe = P rXje 7 b with 7 = / K\C 1 } b P^ b , such that P rxe ~ S (~, 1, l). 



Then, we can rewrite (l66l) as 



E{AUJ = ^C 1/fe E{P„j/ b }. (67) 
Using the Mellin transform of a stable RV, we show in Appendix that (|67l) simplifies to 

E{/V out } = ^sincQV (68) 
Noting that E{V in } = E{iV out } for any directed random graph, we obtain the desired result in 

dS3. □ 

It is insightful to rewrite (1631) as E{iV out | colluding} = E{iV out |non-colluding} ■ r](b), where 
r)(b) = sincQ), and 7](b) < 1 for b > 1. The function rj(b) can be interpreted as the degradation 
factor in average connectivity due to eavesdropper collusion. In the extreme where b = 1 , we have 
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complete loss of secure connectivity with 77(1) = 0. This is because the series P rXj6 = w 
diverges (i.e., the total received eavesdropper power is infinite), so the resulting average node 
degree is zero. In the other extreme where b — > 00, we achieve the highest secure connectivity 
with 77(00) = 1. This is because the first term -A- in the P rxe series (corresponding to the non- 
colluding term) is dominant, so the average node degree in the colluding case approaches the 
non-colluding one. In conclusion, cluttered environments with larger amplitude loss exponents b 
are more favorable for secure communication, in the sense that in such environments collusion 
only provides a marginal performance improvement for the eavesdroppers. 



F. Numerical Results 



We now illustrate the results obtained in the previous sections with a simple case study. 
We consider the case where <r| = of = a 2 , i.e., the legitimate link and the eavesdroppers 
are subject to the same noise power, which is introduced by the electronics of the respective 
receivers. Furthermore, we consider that the amplitude loss exponent is b = 2, in which case 
the CDF of P rx e for colluding eavesdroppers can be expressed using the Gaussian Q-function 



as Fp (x) 



2Q(l/y/x),x > 0. The CDF of ^ in d57]) reduces to 



1 — 2Q \ n\ e C 1 ,\ 




In addition, (|62l and ( |63l ) reduce, respectively, to 

Pcxist = 2Q (ixXzT^Cy^j 

and 

1 — 2Q I vrAgC"^ 

Poutagc 



g<0, 

< Q< %t, 

g> 'Ki- 



rn 



(70) 




< q < %i, 



(71) 



From these analytical results, we observe that of the following factors lead to a degradation of the 
security of communications: increasing A e or r e , decreasing Pe/cr 2 , or allowing the eavesdroppers 
to collude. In particular, as we let Pi/ a 2 — > 00, p Q utage decreases monotonically, converging to 
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the curve jWage = 1 — exp (— 7rA e rf 2 e / 2 ) in the non-colluding case, and to p ou tagc = 1 — 
2Q (irXerfC-^A in the colluding case. 

Figure \T7\ compares the PDFs of the (normalized) received eavesdropper power -p^, for the 
cases of colluding and non-colluding eavesdroppers. For b > 1, it is clear that Y^Li > 

e,z e,l 

a.s., i.e., the received eavesdropper power P rxe is larger in the colluding case, resulting in a PDF 
whose mass is more biased towards higher realizations of Prx,e- 

Figure [T8] plots the probability p ex i S t of existence of a non-zero MSR, given in (1701) , as a 
function of the eavesdropper density A e , for various values of the legitimate link length r e . As 
predicted by analytically, the existence of a non-zero MSR becomes less likely by increasing A e 
or r^O A similar degradation in secrecy occurs by allowing the eavesdroppers to collude, since 
more signal power from the legitimate user is available to the eavesdroppers, improving their 
ability to decode the secret message. 

Figure [19] quantifies the probability p outa , ge of secrecy outage, given in dTD) . as a function of 
the desired secrecy rate g, for various values of eavesdropper density. The vertical line marks 
the capacity %i of the legitimate link, which for the parameters indicated in Fig. [19] is %j = 
log 2 ( 1 + -ib ) = 3.46 bits per complex dimension. As expected, if the target secrecy rate g 
set by the transmitter exceeds %i, a secrecy outage occurs with probability 1, since the MSR 
cannot be greater that the capacity %i of the legitimate link. In comparison with the non-colluding 
case, the ability of the eavesdroppers to collude leads to higher probabilities of secrecy outage. 
This is because more signal power from the legitimate user is available to the eavesdroppers, 
improving their ability to decode the secret message. A similar degradation in secrecy occurs 
by increasing the eavesdropper density A e . 

Figure [201 quantifies the (normalized) average node degree of the 7iS>-graph, E j^,°j^ , versus the 
amplitude loss exponent b. The normalizing factor Xi/X e corresponds to the average out-degree 
in the non-colluding case. As predicted analytically, we observe that in the colluding case, 
the normalized average out-degree 77(6) = E ^°^ is strictly increasing with b. Furthermore, 
77(1) = because the received eavesdropper power P rxe is infinite, and 77(00) = 1 because the 
first (non-colluding) term in the P rx e series dominates the other terms. It is apparent from the 
figure that cluttered environments with larger amplitude loss exponents b are more favorable for 



"Note that p ox ist in d70b depends on A c and n only through the product A e r|. 
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secure communication, in the sense that in such environments collusion only provides a marginal 
performance improvement for the eavesdroppers. 

VII. Conclusions 

Using the notion of strong secrecy, we provided an information-theoretic definition of the 
ZiS-graph as a model for intrinsically secure communication in large-scale networks. Fundamental 
tools from stochastic geometry allowed us to describe in detail how the spatial densities of 
legitimate and eavesdropper nodes influence various properties of the Poisson iS -graph, such 
as node degrees and isolation probabilities. In particular, we proved that the average in- and 
out-degrees equal ^, and that out-isolation is more probable than in-isolation. In addition, we 
considered the effect of the wireless propagation on the degree of the legitimate nodes. Surpris- 
ingly, the average node degree is invariant with respect to the distribution of the propagation 
effects (e.g., type of fading or shadowing), and is always equal to the ratio ^ of spatial densities. 
We then studied the effect of non-zero secrecy rate threshold g and unequal noise powers of, of 
on the iiS-graph. Specifically, we showed that E{iV ou t} is decreasing in g and of, and is increasing 
in of. Furthermore, when the channel gain is of the form g{r) = we obtained expressions 
for E{iV out } as a function of g,aj,a^, and showed that it decays exponentially with g. 

We explored the potential of sectorized transmission and eavesdropper neutralization as two 
techniques for enhancing the secrecy of communications. If each legitimate node is able to 
transmit independently in L sectors of the plane, our results prove that E{iV ou t} increases linearly 
with L. On the other hand, if legitimate nodes are able to inspect their surrounding area to 
guarantee that there are no eavesdroppers within a neutralization radius p, then E{iV out } increases 
at least exponentially with p. 

The PDF of the MSR ^ j between a legitimate node and its i-th neighbor was characterized, 
as well as the probability of existence of a non-zero MSR, and the probability of secrecy outage. 
In particular, we quantified how these metrics depend on the densities A^, A e , the SNR ||, and 
the amplitude loss exponent b. 

Finally, we established the fundamental secrecy limits when the eavesdroppers are allowed 
to collude, by showing that this scenario is equivalent to a SEVIO Gaussian wiretap channel. 
For an arbitrary spatial process LT e of the eavesdroppers, we derived the MSR of a legitimate 
link. Then, for the case where LT e is a spatial Poisson process and the channel gain is of the 
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form g(r) = -§f, we obtained the CDF of MSR of a legitimate link, and the average degree in 
the iiS-graph with colluding eavesdroppers. We concluded that as we increase the density A e of 
eavesdroppers, or allow the eavesdroppers to collude, more power is available to the adversary, 
improving their ability to decode the secret message, and hence decreasing the MSR of legitimate 
links. Furthermore, we showed that cluttered environments with large amplitude loss exponent b 
are move favorable for secure communications, in the sense that in such regime collusion only 
provides a marginal performance improvement for the eavesdroppers. 

Perhaps the most interesting insight to be gained from our results, is the exact quantification 
of the impact of the eavesdropper density A e on the achievable secrecy rates — a modest density 
of scattered eavesdroppers can potentially cause a drastic reduction in the MSR provided at 
the physical layer of wireless communication networks. Our work has not yet addressed all of 
the far reaching implications of the broadcast property of the wireless medium. In the most 
general scenario, legitimate nodes could for example transmit their signals in a cooperative 
fashion, whereas malicious nodes could use jamming to disrupt all communications. We hope 
that further efforts in combining stochastic geometry with information-theoretic principles will 
lead to a more comprehensive treatment of wireless security. 

Appendix A 
Proof that Inequality (1231) is Strict 

Define the event Fi = {lie-f^Qxjl)} > 1} and its complementary event Ei, which denote 
full and empty, respectively. Using this notation, we can rewrite (1221) as 

Pin^sol = p|/\^| 

< F{F 1 A F 2 }. 

To prove that p in _i SO i < P{i*i} as in d23]), it is sufficient to show that F{F 1 A F 2 } < F{Fi}, or 
equivalently, P{i<\} — P{i*i A F 2 } = F{F 1 AE 2 } > 0. Define the ball B { = B^(\xi\). Then, with 
reference to the auxiliary diagram in Fig. |5(c)[ we can write 

F{F 1 A E 2 } = E Ut {F{F 1 A E 2 \U e }} 

= E n , { (1 - e ~ x ^ B ^) ■ e~ A = A ^} . (72) 
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Since B\ B 2 a.s., then A{Bi\B 2 } > a.s., and the argument inside the expectation in (1721 ) is 
strictly positive, and thus ¥{Fi A E 2 } > 0. This concludes the proof. 



Appendix B 
Derivation of (1451) 

Because Hi is a Poisson process, the Palm probability P x {|x| < R e ,i} in (l44l can be computed 
using Slivnyak's theorem by adding a legitimate node at location x to IT^. For a fixed x G 
£>(p, oo), we can thus write 

P*{M < i? e ,i} = P©,n e {n e {0 n% \x\)\B x (p)} = 0} (73) 

>P e ,n c {n e {enP(p,|x|)} = 0} (74) 

= E {exp(-A e A{0nP(p,|a;|)}} (75) 

>exp(-A e E e {A{0nl?(p,|x|)}}), (76) 

Equation (1731) follows from conditioning on 9, and using the fact that n e and are indepen- 
dent. Equation (|76|) follows from Jensen's inequality. The term inside the exponential in (|76|) 
corresponds to the average area of a random shape, and can be computed using Fubini's theorem 
as 




E e {A{0 n V(p, \x\)}} = E e { t{y e n V{p, \x\)}dy 

J J R 2 

F{y E 0}dy 

V(p,\x\) 

P{U e {B v {p)} = 0}dy 

V(p,\x\) 

^ Wp2 dy 

Pe7r(k| 2 -p 2 ) (77) 





Note that p@ corresponds to the probability that a fixed point y is outside the total neutralization 
region 0, and does not depend on the coordinates of y due to the stationarity of the process 0. 
Replacing (1771) into ( 1761) , we obtain the desired inequality in (1451) . 
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Appendix C 
Derivation of (1681) 

Let the Mellin transform of a RV X with PDF f x {x) be defined as^ 



Mx(s) = / x s f x (x)dx. (78) 
Jo 

If X ~ 5 (a, 1, 1) with < a < 1, then flM Eq. (17)] 



for —1 < Re{s} < a. Then, since P rx e ~ S (a, 1, 1) with a = | e (0, 1), we use (|79| ) to write 

E{P-,:}= / x- a /p rxc (x)rfx 
Jo 



cos (f ) 
r(l + a)' 

Using ([58]) and ([80]) . we expand ([67]) as 

E{iV ou t} = ^CJL{P-«} 



(80) 



A/ 1 -a cos (fj 

A^ ' r(2-a)cos(f ) ' r(l + a) 

A^ 1 — a 

\~ e ' r(2-a)r(l + a) 

Xe sin(7ra) 



A e iia 

where we used the following properties of the gamma function: r(z+l) = zT(z) and T(z)T(l 

sin(7T2) ' 



z) = . 7 \ - Defining sinc(x) = sin ( 7nr ) and noting that a = -k we obtain (1681) . 

/ Sin(7T2) O \ / -7T.T O h ' 1 » 
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Symbol 


Usage 


E{-} 


Expectation operator 


P{.} 


Probability operator 


* 


Convolution operator 


t 


Conjugate transpose operator 


fx(x) 


Probability density function of X 


Fx{x) 


Cumulative distribution function of X 


H(X) 


Entropy of X 


lit = {Xi},lh = {ei} 


Poisson processes of legitimate nodes and eavesdroppers 


Xe, A e 


Spatial densities of legitimate nodes and eavesdroppers 


n{K} 


Number of nodes of process II in region 1Z 


N in ,N ont 


In-degree and out-degree of a node 


B X { P ) 


Ball centered at x with radius p 


V(a,b) 


Annular region between radiuses a and b, centered at the origin 


A{TZ} 


Area of region 1Z 




Random propagation effect between Xi and Xj 


Rl,i 


Distance between Xi £ II^ and origin 


Re,i 


Distance between G n c and origin 


#s 


Number of elements in the set S 


g{x,e) 


Gamma distribution with mean x9 and variance x6 2 




Gaussian distribution with mean /i and variance a 2 


S(a,/3,j) 


Stable distribution with characteristic exponent a, skewness f3, and dispersion 7 



Table I 

Notation and symbols. 



Alice 



Legitimate channel 



1? w? 



Bob 



encoder 



X" 
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t t y; 

K < 
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decoder 
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^ decoder 
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Si 



Eavesdropper channel 



Eve 



Figure 1. Wireless wiretap channel. 
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• Legitimate node 
X Eavesdropper node 




Figure 2. Example of an i<S-graph on R 2 , considering that the secrecy rate threshold is zero, the wireless environment introduces 
only path loss, and the noise powers of the legitimate and eavesdropper nodes are equal. In such scenario, a transmitter x% is 
connected to a receiver Xj if and only if Xj is closer to Xi than any other eavesdropper, as described in ((9}. 
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iVout = 3 
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-Re.l..--'' ^ 




Re,2 1 

• if 


• 
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Figure 3. Out-degree of a node. In this example, the node at the origin can transmit messages with information-theoretic 
security to A^ ou t = 3 nodes. 
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Figure 4. In-degree of a node. In this example, the node at the origin can receive messages with information-theoretic security 
from Ni n = 2 nodes. The RV A is the area of a typical Voronoi cell, induced by the eavesdropper Poisson process il e with 
density A c . 




(a) (b) (c) 

Figure 5. Auxiliary diagrams. 
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1 31 
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1 63 


301 
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Table II 

Stirling numbers of the second kind. 



k 


12 3 4 


E{2 fc } 


1 1.280 1.993 3.650 



Table III 

First four moments of the random area A of a typical Voronoi cell, induced by a unit-density Poisson 

process |p49ll . 




degree n 



Figure 6. PMF of the in- and out-degree of a node (^j — 0.4). The vertical line marks the average node degrees, E{iV ut} = 
E{iVi n } = -j^- = 2.5, in accordance with Property 13.21 




Figure 8. The effect of non-zero secrecy rate threshold g and unequal noise powers <jj,a^ on the average node degree, for 
the case of g{r) = -55-. The function ip(r) was defined in {36} . 
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Figure 10. Out-degree of a node with sectorized transmission. In this example with L = 4 sectors, the node at the origin can 
transmit messages with information-theoretic security to JV ou t = 5 nodes. 



53 



it 




K(o,iJe,i)ne 



Figure 11. Out-degree of a node with eavesdropper neutralization. In this example, the node at the origin can transmit messages 
with information-theoretic security to N out = 5 nodes. 



25 




0.05 0.1 0.15 0.2 0.25 0.3 0.35 0.4 0.45 0.5 

P (m) 



Figure 12. Average node degree versus the neutralization radius p, for various values of A c (\e = lm 2 ). 
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A e (nO 



Figure 13. Probability p<jxist,i of existence of a non-zero MSR versus the eavesdropper density A c , for various values of the 
neighbour index i (\i = 1 m -2 , b = 2, Pe/a 2 = 10, g — 1 bit). 
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Figure 14. Probability p utagc,i of secrecy outage between a node and its i-th closest neighbour, for various values of the 
neighbour index i (\ t = lm" 2 , A c = 0.1m" 2 , 6 = 2, P t /a 2 = 10). 
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o Alice (probe transmitter) 

• Bob (probe receiver) 

X Colluding eavesdroppers 
i ' 



X 
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Figure 15. Communication in the presence of colluding eavesdroppers. 
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Eavesdropper channel 



Figure 16. SIMO Gaussian wiretap channel, which can be used to analyze the scenario of colluding eavesdroppers depicted 
in Fig.[TH 
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Non-colluding 


Colluding 


P ~ -Ar 


p v^°° P t 


= it (it ) 


' exp^-7rA c ^ 


)■;; 


,i > 


P^, ~s(a=l, P = l, 7 = TrAeC-^P// 6 ) 


F-JL, ( c ) = 1 - ex P 


( 

— 7rA e 










,0<e<3Lf 


F^( C ) = l-F Prsc 
with P 1Xj c ~ 




,0 < g < ffo 
= 1) 






2-e-l j 


^ (*A.cr/ 6 )»^ ^ 

5(a = i, /3 = 1, 7 


Pexist = exp 


^— 7rA c r^ 


mi 


PCX1St ( C^rfC-^W ) 


E{7V ou t} = % 


E{AUt} = ^sinc(i) 



Table IV 

Comparison between the cases of non-colluding and colluding eavesdroppers, considering a single 
legitimate link, and a channel gain of the form g(r) = . 



0.3 




normalized power x 



Figure 17. PDF fp a „/p,(x) of the (normalized) received eavesdropper power Pix,e/Pe, for the cases of colluding and non- 
colluding eavesdroppers (b = 2, A c = 0.5 m -2 ). 
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Non-colluding, r t = 1 m 

- - ■ Non-colluding, r t = 2 m 
Colluding, r< = 1 m 

- - ■ Colluding, r t = 2 m 




0.15 0.2 

A e (m- 2 ) 



Figure 18. Probability p cx i st of existence of a non-zero MSR versus the eavesdropper density A e , for the cases of colluding 
and non-colluding eavesdroppers, and various values of rt (b — 2). 




Colluding, A e = 0.1 m 2 
Colluding, A e = 0.2 m" 2 
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Figure 19. Probability p uta gc of secrecy outage for the cases of colluding and non-colluding eavesdroppers, and various 
densities A e of eavesdroppers (b = 2, Pi jo 2 = 10, rt = lm). The vertical line marks the capacity of the legitimate link, which 
for these system parameters is %i — 3.46 bits/complex dimension. 
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Figure 20. Normalized average node degree of the i5-graph, \ t J^ , versus the amplitude loss exponent 6, for the cases 
colluding and non-colluding eavesdroppers. 



